Thank you for the question.
In fact, a privacy impact assessment is something that a Treasury Board directive requires government departments to do, but it's not a legal obligation in the Privacy Act. This is one of the recommendations I have made to Parliament and continue to make. It should be an obligation. There should be the opportunity for my office to give input before the fact when there's a major change, including legislation.
It's something to manage. There are cabinet confidences to be considered, but I would agree that the opportunity would be important.